CVE-2010-1622
NoneCVSS
—
EPSS
52.0%
Published
Jun 21, 2010
CISA due date
—
The record
SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.springframework:spring | 2.5.0 | 2.5.7 |
| Maven | org.springframework:spring | 3.0.0 | 3.0.3 |
| Red Hat:jboss_web_framework_kit:1::el4 | jboss-wfk-1.0.0-uninstall | 0 | 0:1.0.0-3.ep5.el4 |
| maven | org.springframework/spring | 2.5.0 | No fix |
| maven | org.springframework/spring | 3.0.0 | No fix |
| maven | org.springframework/spring-core | 2-alpha0 | No fix |
| maven | org.springframework/spring-core | 3.0-alpha0 | No fix |
Related vulnerabilities
- CVE-2025-41249 The Spring Framework annotation detection mechanism may not correctly resolve annotations… Also affects org.springframework/spring-core
- CVE-2016-1000027 Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution… Also affects org.springframework/spring-core
- CVE-2026-114125 Storybook is a frontend workshop for building user interface components and pages in… CWE-94
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-94
- CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-94
- CVE-2026-112095 A flaw has been found in SourceCodester Inventory System 1.0. CWE-94
- CVE-2026-112042 A security flaw has been discovered in diem-project diem up to… CWE-94
- CVE-2026-112038 A vulnerability has been found in diem-project diem up to… CWE-94